Setting up a counter in XSOAR

Hello,

So we have a playbook that is meant to send alerts via email in strikes. In each strike there is a link to a survey that has only YES/NO answers and based on the answers given be the recipients of those emails we want the playbook to follow a

How to dynamic list in email template?

Hello,

I want to get a list data of unknown lenght into html body(list).
But I don't know how to do this.
For example, I am pulling a data. in one of them, data1 and data2 come. in the next one, data1, data2 and data3 come. how can I print them dynam

How to add and remove IP from destination group using ZScalar integration in XSOAR?

Hello, Is there any command in XSOAR that can be used to add or remove IP's from ZScalar destination group?

Demisto Service Failed

Hi Everyone ,

We are running XSOAR instance with NFR license. 

Recently for unknown reasons, the demisto service stopped and is never coming up when we try to start. 

[root@localhost ~]# systemctl status demisto.service
● demisto.service -

Playbook Conditions : How to Combine Multiple Conditions in One Task

Hi, I am new to XSOAR and I was wondering if there was a conventional way of arranging similar conditions. For example, I am getting a ticket in task 1 and I want the following task (task 2) to give a value to a field called ticket.status. conceptual

Extract some fields from csv file

Hi,

I have exported a output of splunk query in csv format using exporttocsv automation in a playbook. Now I wanted to use a column of this csv output to be a input for other task. Any one can please suggest if this is possible.

Netskope API v2 error in XSOAR

XSOAR does not parse properly the ids from Netskope. It changes the last two digits with zeros. These errors are in the official XSOAR documentation. Example:

"incident_id": 1478029261577663500

"app_session_id": 4359394467077842400

"browser_session_i

Auto Incidnet closure

Dear Community,

I'm looking for a way to daily automatically close all incidents with specific criteria.

I'm trying to archive that using jobs , I'm trying to create a playbook the query incidents (with specific criteria) and whatever the query o

Disable/Enable Integration via API/Playbook/Automation

Hi Guys,

I have list of integration instances that i need to disable/enable in one click.

I didn't see any function or command in the system that can do it.

There is any other way to do that?